CVE-2022-40200: Gvectors Wpforo Forum

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Auth. (subscriber+) Arbitrary File Upload vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.

Affected products

• Gvectors Wpforo Forum: up to and including 2.0.9

Published 2022-11-17. Last modified 2026-06-17.